/ feedInteger overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code. CISA required action: The impacted products are end-of-life and should be disconnected if still in use.
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affect…
A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.…
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.
Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. CISA required action: Immediately block all inter…
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods. CISA required action: Apply updates p…
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code. CISA required action: Apply updates per vendor instructions.
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times. CISA required action: Apply up…
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object. CISA required action: Apply updates per vendor…
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field. CISA required action: Apply updates per…
Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: For Adobe Acrobat and Reader, apply updates per vendor instructions. For…
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. CISA required action: Apply updates per vendor instructions.
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. CISA required action: Apply updates per vendor instructions.
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disc…
Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution. CISA required action: Apply updates per vendor instructions.
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnec…
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply…
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to ex…
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disc…